A look at so-called Russian, encrypted, or “white” SIMs, used by criminals to spoof phone numbers, add voice manipulation to calls in real-time, and more
Criminals use so-called Russian, encrypted, or white SIMs to change their phone number, add voice manipulation to their calls … Tweets: @josephfcox , @brianroemmele , @lorenzofb , @kevincollier , @josephfcox , @josephfcox , @josephfcox , @josephfcox , @josephfcox , and @josephfcox Tweets: Joseph Cox / @josephfcox : These SIM cards, sourced through word of mouth networks, companies online, or street dealers, even let people spoof the number of a bank to scam victims. Want to ring up someone, but leave a random number on their phone? Also possible https://www.vice.com/... https://twitter.com/... Brian Roemmele / @brianroemmele : “Beyond spoofing phone numbers, some SIMs let a caller manipulate their voice in real-time, adding a baritone or shrill cloak to their phone calls” The “white SIM” problem is a big issue cell companies should now start to own up to, or see new painful regulation. https://twitter.com/... Lorenzo Franceschi-Bicchierai / @lorenzofb : This is the craziest rabbit hole you'll jump in today., courtesy of @josephfcox. https://www.vice.com/... Kevin Collier / @kevincollier : Absolutely nobody catalogues how cybercrime evolves in real time like @josephfcox and it is incredibly obnoxious. https://www.vice.com/... Joseph Cox / @josephfcox : We obtained one of these so-called Russian/encrypted/white SIM cards via a source close to the criminal world. Paid around $100 in Bitcoin, a small package arrived very quickly after. Allowed us to buy a data SIM without giving identifying info to a teleco https://www.vice.com/... https://twitter.com/... Joseph Cox / @josephfcox : The National Crime Agency, kinda like a UK FBI, said it has seized so-called Russian SIMs from suspects during investigations https://www.vice.com/... https://twitter.com/... Joseph Cox / @josephfcox : New: recently got a call from France. That's what my phone said. Turned out the caller was using a SIM that spoofs any number they want. Went into the underground industry of these SIMs, that can also add voice manipulation. “They are the crime SIMs” https://www.vice.com/... Joseph Cox / @josephfcox : Multiple people in the trade of these SIMs said they worked by first connecting to a server overseas, which then makes the actual call on the users' behalf. This is where the spoofing/voice manipulation comes in. People drawn to the term “Russian SIMs” https://www.vice.com/... https://twitter.com/... Joseph Cox / @josephfcox : Here's someone selling a so-called Russian SIM. In the demonstration, they show how easy it is spoof whatever number you want. Some cards also add the worthwhile benefit of being worldwide, unlimited data SIMs criminals obtain anonymously via Bitcoin https://www.vice.com/... https://twitter.com/... Joseph Cox / @josephfcox : The organizations operating these so-called Russian SIMs are likely running their own MVNO (an entity that essentially uses an established teleco's infrastructure) to do their operations https://www.vice.com/... https://twitter.com/...
Context & Ripple Effects
This report slots into a well-documented arc of telecom infrastructure turning against its users. The FBI already dismantled one privacy-branded phone operation that served organized crime — Phantom Secure — while SIM hijacking through carriers' customer service has been draining social media and gaming accounts for years. What is new here is the supply side: rather than attacking existing numbers, sellers distribute purpose-built SIMs, at around $100 payable in Bitcoin, that route calls through overseas servers so users can spoof any number and distort their voice live.
The mechanism matters because it exploits the same trust gap regulators have flagged before: US carriers have been slow to share real-time SIM swap data with banks ([[a:941042]]) even as fraudsters weaponize the phone channel. If these operators run their own MVNOs over established telecom infrastructure, the abuse is not a hack of the network — it is a tenant on it.
First-order effects
- Scam victims receive calls that display a bank's real number with a manipulated voice, defeating both caller ID and voice familiarity as fraud checks; the UK's National Crime Agency is already seizing these SIMs from suspects.
Second-order effects
- Banks and other impersonation targets lose caller ID as a usable authentication signal, pushing them toward app-based or callback verification; carriers hosting these MVNOs face pressure to vet which tenants ride their infrastructure.
Third-order effects
- If the pattern holds, law enforcement shifts from chasing individual callers to shutting down the operator layer — the Phantom Secure playbook applied to MVNOs — while the industry treats a phone number and a voice as untrusted inputs by default.
The trend: Criminal communications are professionalizing into full-stack telecom services built atop legitimate carrier infrastructure, steadily eroding the phone call's default trustworthiness.